This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/9_iEf91RWS6Or4zXi3xHqglPXuU.roa File: 9_iEf91RWS6Or4zXi3xHqglPXuU.roa (raw, json) Hash identifier: nfq16D2TXOKtFwSZlC1l0j0NZwkuSugZlNqjJes2gvs= Subject key identifier: F7:F8:84:7F:DD:51:59:2E:8E:AF:8C:D7:8B:7C:47:AA:09:4F:5E:E5 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B2467D048ACC98D98EB0EF1AB745 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/9_iEf91RWS6Or4zXi3xHqglPXuU.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151187 IP address blocks: 2a13:a5c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b2:46:7d:04:8a:cc:98:d9:8e:b0:ef:1a:b7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f8847fdd51592e8eaf8cd78b7c47aa094f5ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:b8:d0:26:9f:dc:b0:7b:50:13:d6:ea:29: 30:35:ea:51:97:2d:85:35:83:aa:fd:64:59:7e:61: 75:7d:42:78:e8:c4:8b:1a:e4:12:59:4d:75:2f:d0: 65:31:76:8b:ec:99:d9:90:20:ca:b9:80:40:79:65: 95:55:b6:cd:d8:43:d5:07:b4:84:9d:2d:66:24:f6: b5:4e:f1:4a:ea:54:27:9b:4d:a3:9a:0d:f9:af:4c: 02:36:dc:c2:2c:b9:2c:7a:c7:3e:f0:fb:94:9b:b5: 95:a7:3e:74:f4:07:61:74:6b:df:e0:75:4e:1c:ac: 4e:1d:86:97:1c:4d:7d:a6:be:ce:21:6c:c9:65:93: bf:e2:c6:92:a8:1c:21:9f:40:69:11:1c:69:03:fb: e3:40:90:ca:de:6d:ff:3f:cd:4f:02:c4:d3:75:79: d5:80:0f:eb:94:bc:18:fc:5b:e3:e6:81:b9:ca:9d: 5b:ef:af:cd:20:bb:35:7d:5e:60:da:a9:bb:c1:85: bd:17:06:d3:01:cf:82:df:05:85:fa:ce:32:0b:7f: 0f:25:62:75:95:d1:fa:82:70:0d:e1:9a:fb:0f:8f: 7c:91:32:9b:dd:14:dc:52:8a:32:c2:ed:67:65:6a: 88:1a:37:2d:40:84:ca:ff:49:a7:93:10:13:76:90: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F8:84:7F:DD:51:59:2E:8E:AF:8C:D7:8B:7C:47:AA:09:4F:5E:E5 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/9_iEf91RWS6Or4zXi3xHqglPXuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c5::/48 Signature Algorithm: sha256WithRSAEncryption ab:16:ac:c7:d2:0d:92:8f:3d:c2:15:7c:6d:98:93:1a:86:1b: bc:90:9e:83:7e:ba:00:c0:5e:18:a9:09:98:42:49:2a:b3:60: 23:c1:31:08:a1:ec:6e:2e:48:06:5b:1e:b8:60:39:b6:a4:ed: c1:26:6a:4c:fe:0b:42:f6:37:b3:ef:ad:a8:4b:9b:2e:9d:b5: d6:37:62:de:e3:77:87:46:27:2f:39:65:3d:ff:4c:d6:ed:5f: 62:6e:30:d9:f3:44:e9:04:14:4f:6f:59:75:bf:5f:2b:1f:81: 66:e5:a6:15:d5:9e:af:df:19:15:37:f1:c1:c0:78:91:0e:1f: b6:a6:45:dd:26:4a:fe:d7:1e:37:44:47:33:be:ec:47:c5:40: db:5f:79:77:e0:9e:85:e6:e3:99:53:ee:e9:e0:33:48:b8:60: fc:05:a8:94:f8:4b:93:7c:13:4d:58:9f:26:57:8f:dd:b7:80: 3e:92:10:60:8e:39:a1:e8:fc:32:72:b4:0a:71:d9:b3:82:46: 7e:56:4b:bd:21:65:70:2d:a4:1d:d1:23:8c:05:a2:d3:47:73: f5:00:22:9f:bb:c2:42:44:2f:a6:b1:0f:6b:57:36:68:5e:fa: 94:50:c3:8c:ce:ad:b4:4d:53:20:db:62:5b:ff:93:d9:f7:2c: ca:58:f9:66 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OLJGfQSKzJjZjrDvGrdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2Y4ODQ3ZmRkNTE1OTJlOGVhZjhjZDc4YjdjNDdhYTA5NGY1ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlae40Caf3LB7UBPW6ikwNepRly2F NYOq/WRZfmF1fUJ46MSLGuQSWU11L9BlMXaL7JnZkCDKuYBAeWWVVbbN2EPVB7SE nS1mJPa1TvFK6lQnm02jmg35r0wCNtzCLLksesc+8PuUm7WVpz509AdhdGvf4HVO HKxOHYaXHE19pr7OIWzJZZO/4saSqBwhn0BpERxpA/vjQJDK3m3/P81PAsTTdXnV gA/rlLwY/Fvj5oG5yp1b76/NILs1fV5g2qm7wYW9FwbTAc+C3wWF+s4yC38PJWJ1 ldH6gnAN4Zr7D498kTKb3RTcUooywu1nZWqIGjctQITK/0mnkxATdpDM0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPf4hH/dUVkujq+M14t8R6oJT17lMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvOV9pRWY5MVJXUzZPcjR6WGkzeEhxZ2xQWHVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOlxQAA MA0GCSqGSIb3DQEBCwUAA4IBAQCrFqzH0g2Sjz3CFXxtmJMahhu8kJ6DfroAwF4Y qQmYQkkqs2AjwTEIoexuLkgGWx64YDm2pO3BJmpM/gtC9jez762oS5sunbXWN2Le 43eHRicvOWU9/0zW7V9ibjDZ80TpBBRPb1l1v18rH4Fm5aYV1Z6v3xkVN/HBwHiR Dh+2pkXdJkr+1x43REczvuxHxUDbX3l34J6F5uOZU+7p4DNIuGD8BaiU+EuTfBNN WJ8mV4/dt4A+khBgjjmh6PwycrQKcdmzgkZ+Vku9IWVwLaQd0SOMBaLTR3P1ACKf u8JCRC+msQ9rVzZoXvqUUMOMzq20TVMg22Jb/5PZ9yzKWPlm -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:29 2026 by rpki-client